FRESCI / Privacy

Privacy information

Updated 18 October 2026

Who is responsible for your data?

FRESCI is operated by SCIENCE&STRATEGY S.L., NIF B67524405, with its operating and contact address at Carrer Sant Leopold 27, 08221 Terrassa (Barcelona), Spain. SCIENCE&STRATEGY S.L. is the controller for the personal data it uses to handle your website enquiry and operate this website. Our Legal notice contains the company’s registration details.

For privacy questions or to exercise your rights, email info@fre-sci.com or write to the contact address above. This notice covers website visits and initial enquiries. A client engagement may require additional information about its own processing.

Enquiries: data, purpose and legal basis

The form asks for your name, email address, organisation, selected service and a short description of your project. These fields are required so we can assess and answer your request; without them the form cannot be sent. Your role, deadline and budget or purchasing route are optional. You may email us instead.

We use enquiry information to understand your request, reply and discuss a possible project. When you contact us for an organisation, our legal basis is our legitimate interest in responding to professional enquiries and managing that business relationship, subject to your interests and rights (GDPR Article 6(1)(f)). Where you personally ask us to take steps towards a contract with you, Article 6(1)(b) applies to those requested steps. We do not treat sending an enquiry as consent to marketing.

Within FRESCI, website enquiries are handled only by the company’s owner. When you send the form, it transmits the enquiry to Wix Forms in FRESCI’s Wix account. The configured form also creates or updates a Wix Contact using your email address and organisation. An internal Wix automation sends a new-enquiry notification to the configured site-owner role. These records and any notification copies are part of the enquiry workflow.

Please do not include identifiable patient data, other sensitive personal data or confidential documents in an initial enquiry. If a project needs further information, we can agree an appropriate channel and safeguards separately.

How long do we keep enquiries?

Unsuccessful enquiries are kept for no more than 30 calendar days from receipt. The rule covers the enquiry record, enquiry-only contact information and notification copies under FRESCI’s control. If an enquiry is still active at day 30, we will agree the further handling with you rather than silently extending this period.

If an enquiry becomes a client engagement, information needed for that engagement follows the applicable client and legal retention requirements, which we explain when establishing the relationship. Where a specific legal duty or the establishment, exercise or defence of a legal claim requires limited retention, we retain only the relevant information, restrict its use and apply the relevant period. A Wix Contact already needed for another legitimate relationship is not erased indiscriminately; obsolete enquiry information is removed.

Website operation and security

Wix hosts the website and provides the enquiry service. Wix and its infrastructure providers process technical information, including connection and browser information, to deliver and protect these services. The form uses anonymous visitor-session credentials in browser storage. Our legal basis for the necessary website and security processing is our legitimate interest in maintaining a secure, functioning website (Article 6(1)(f)), subject to your rights. The cookie policy explains the identified cookies and storage.

Optional analytics and videos

Google Analytics 4 is optional. If you enable Analytics in Cookie preferences, the Google tag measures visits and website interactions to help us understand and improve the site. Measurement includes browser/device information, approximate location derived from connection information, page views, scrolls and link interactions; video events require the relevant optional choices. Our basis for this optional processing is your consent (Article 6(1)(a)). The tag stays blocked until you enable Analytics. The integration does not send enquiry field contents and disables advertising personalisation and Google Signals. Automatic form-interaction measurement is disabled in the stream. Google Analytics user and event data retention is set to two months, with the user-retention period not restarted by new activity. Most standard reports use aggregated data and are not governed by those user/event retention controls. The account currently contributes aggregated, de-identified measurement data to Google’s modelling and business-insight features and permits technical support and business recommendations; Google products-and-services sharing is disabled.

YouTube embeds are also optional and have a separate choice. Enabling videos lets the embedded player connect to YouTube, which processes connection and viewing information under its own terms and privacy information. Our basis for enabling that optional connection is your consent. You can instead follow a labelled external YouTube link.

You can withdraw either choice using Cookie preferences. Withdrawal stops future optional activity in this browser; it does not affect the lawfulness of earlier processing or automatically erase data already held by a provider. See the cookie policy for how withdrawal works.

Providers and international processing

Wix provides hosting, Forms, Contacts and the internal notification workflow. Google provides the optional Analytics and YouTube services. External links to Substack, publications and project resources take you to the relevant provider when you follow them; that provider’s privacy information then applies.

These services can involve processing outside the European Economic Area. The Wix Data Processing Agreement describes its processing framework, including Israel’s EU adequacy decision and safeguards for onward transfers. Wix publishes its subprocessor list. Google publishes its data processing terms and transfer safeguards, including the EU–US Data Privacy Framework for covered transfers and standard contractual clauses where applicable. Contact us for information about the safeguards applicable to FRESCI’s processing.

Your rights

You may request access, correction, erasure or restriction of your personal data, and object to processing based on legitimate interests. Portability applies where the GDPR’s conditions are met. You can withdraw optional consent at any time. Email info@fre-sci.com with your request; we ask for additional identity information only where reasonably needed.

We normally respond within one month. If a permitted extension is needed because of the number or complexity of requests, we explain it within that first month. You may complain to the Spanish Data Protection Agency (AEPD).